Methodologies for pentesting

When faced with the task of performing pentesting, we have a variety of methodologies from which we can choose to follow or use as a guide when conducting audits. The choice depends on the individual needs of each person involved in the bug bounty program.

Among the options available in the field of pentesting, there are the following methodologies:

• PTES: This is a methodology that provides a detailed framework for conducting pentesting. It covers all phases, from planning to reporting and risk mitigation (http://www.pentest-standard.org/index.php/Main_Page).
• OWASP: OWASP offers a well-established methodology for testing web application security. Its methodology focuses on identifying common vulnerabilities in web applications, such as SQL injection, cross-site scripting (XSS), and improper access control (https://owasp.org/www-project-web-security-testing-guide/latest/3-The_OWASP_Testing_Framework/1-Penetration_Testing_Methodologies).
...